Create a domain policy to lock computer after 15 minutes
I need to create a group policy to lock computers after 15 minutes? Can anyone tell me where to do this?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
michael626
dont forget gpupdate...
ASKER
ok, need to know, Why do not modify the default domain policy?
In the GPO editor under user configuration>administrati
ASKER
Can't seem to find display ?
iamge.JPG
iamge.JPG
The reason you don't modify the default policy is because it is the default. Sorry for the crappy answer, but you will be up a creek if you screw up the default which is applied to all your computers AND users.
If you hose any other GPO, you can usually remove it. You can also target OU's with only computers instead of applying it to OU's with just users and vice versa
Frank
If you hose any other GPO, you can usually remove it. You can also target OU's with only computers instead of applying it to OU's with just users and vice versa
Frank
you did not click administrative templete. Administrative templete is just above preferences.
Default Domain Controller is linked with all DCs and AD. Making mistake and breaking domain policy may result broken GPO, SYSVOL policies.
Best practice guide http://technet.microsoft.com/en-us/library/cc737484(WS.10).aspx & http://technet.microsoft.com/en-us/library/cc773167(WS.10).aspx
Default Domain Controller is linked with all DCs and AD. Making mistake and breaking domain policy may result broken GPO, SYSVOL policies.
Best practice guide http://technet.microsoft.com/en-us/library/cc737484(WS.10).aspx & http://technet.microsoft.com/en-us/library/cc773167(WS.10).aspx
ASKER
@ michael626
What about gpupdate? don't know about this...
What about gpupdate? don't know about this...
ASKER
Ok, I only have 1 DC, since this is a small business but I've changed a few things in the default domain policy, can I just add them all to the one I just created and named and set the default to not enforced and enforce the new one? Just want to make sure I do this in the correct steps.
ASKER
Just curious can you have both policies enforced?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
If you have GP refresh time set than client should should refresh GP itself. If not than please do an gpupdate or reboot client. screen looks ok.
ASKER
@ araberuni
I've never set a GP refresh time and I've never used GPupdate. I've just been rebooting.
I've never set a GP refresh time and I've never used GPupdate. I've just been rebooting.
ASKER
My posting shows the exact location of where the settings were found on a Windows Server 2008 R2 Standard